Isn’t the following better than current windows package managers?

a) Download file.EXE binary from somewhere

b) run: certutil -hashfile file.EXE (which spits out hash value)

c) search for hash value obtained at step “b” on a site like: virustotal.com : it tells you if malware is detected

d) run: file.exe (if no malware detected)

I honestly couldn’t find a better method on MS Windows. Other suggestions?